Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37362e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          3OVrUnhQLkjjQKWtvcgDkJW+oanQLI0RFor5phB/nbw=
Subject key identifier:   21:6F:D3:E3:22:9B:CA:81:85:4E:9E:E1:13:5F:E9:4F:33:BC:CF:6C
Certificate issuer:       /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial:       0EBBA98D8FF8FAF0D82D52F6016849540D91EC8E
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa
Signing time:             Fri 24 May 2024 00:22:07 +0000
ROA not before:           Fri 24 May 2024 00:17:07 +0000
ROA not after:            Fri 23 May 2025 00:22:07 +0000
asID:                     28184
IP address blocks:        189.89.76.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bb:a9:8d:8f:f8:fa:f0:d8:2d:52:f6:01:68:49:54:0d:91:ec:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
        Validity
            Not Before: May 24 00:17:07 2024 GMT
            Not After : May 23 00:22:07 2025 GMT
        Subject: CN=216FD3E3229BCA81854E9EE1135FE94F33BCCF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:ad:7e:91:e3:fc:c2:57:1d:6c:43:af:92:
                    0a:1a:77:07:48:b2:cc:97:f0:40:4e:fb:de:59:50:
                    a2:66:3d:51:5d:87:19:57:94:33:55:d0:38:a4:9c:
                    c7:e5:4e:b8:4c:2f:8f:7d:e9:a6:2b:c4:0b:38:a0:
                    e0:cf:50:e5:41:23:d6:b4:44:f4:4e:c0:72:c3:8f:
                    44:35:7d:e2:9f:65:ce:9d:18:f8:18:ea:43:fb:3a:
                    d4:46:e1:bb:28:f5:87:5c:55:70:4c:e3:60:86:ea:
                    f2:27:a2:20:b1:22:89:88:7b:7c:52:28:59:fd:9b:
                    0f:d6:58:27:c1:b7:8e:60:65:fa:4b:aa:0a:a6:f2:
                    66:73:f1:10:c3:b1:e8:4d:09:bd:27:ec:e0:70:cd:
                    7f:f4:37:4c:46:93:5f:e2:d3:ec:d1:7c:70:fe:20:
                    69:d1:54:ef:ba:56:a8:de:8b:e6:c5:79:3c:d0:92:
                    13:2b:23:82:68:10:0d:ee:1d:62:9f:80:f4:e7:92:
                    2f:92:5a:e1:da:46:68:50:67:b5:83:6a:8a:9d:c0:
                    7b:89:42:20:7f:d1:2f:70:13:48:e9:b9:87:0f:2a:
                    ef:4b:ed:37:4a:51:b5:cd:03:88:f7:69:45:4f:f2:
                    bd:b6:2c:1e:3d:77:5e:5b:84:05:b3:7e:51:d6:fc:
                    79:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6F:D3:E3:22:9B:CA:81:85:4E:9E:E1:13:5F:E9:4F:33:BC:CF:6C
            X509v3 Authority Key Identifier:
                keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:5e:5d:26:b6:6a:16:82:95:ff:f7:5d:34:ef:b9:bc:43:90:
         5c:9d:15:01:a6:6e:74:bc:ca:5d:92:64:50:e8:cc:29:cd:b4:
         c5:82:0d:47:0c:ee:5f:a5:6b:02:5a:6a:fc:b6:4f:66:67:5a:
         63:d8:f1:90:ce:ce:24:1f:83:f2:b8:0e:8a:03:c3:92:47:92:
         83:7d:c9:4c:49:0f:08:3b:8d:85:e3:8a:46:49:61:d0:99:0e:
         2c:b4:b4:ce:7d:46:55:5c:17:ab:70:cd:f5:72:79:a0:3f:3f:
         cf:fd:dc:34:16:fb:8d:f1:94:20:3a:95:6c:69:1b:78:a2:2b:
         09:78:3c:22:d9:37:7b:bb:a2:d9:73:11:63:4e:e0:ff:10:f7:
         06:7d:aa:b4:26:09:09:60:23:a9:14:39:22:f9:35:23:81:73:
         49:f5:ca:8c:9d:7c:79:aa:de:3d:1e:5a:c9:d2:e9:63:05:fc:
         8d:12:75:98:21:c2:3b:2b:9a:68:28:7a:b6:13:2d:eb:7f:02:
         17:f9:5b:78:1c:91:4d:92:13:94:27:02:bd:ad:2f:49:ce:aa:
         6d:13:be:68:6c:bc:ee:51:eb:40:93:e8:0d:af:ee:ff:94:73:
         ca:76:d6:23:48:a5:62:b9:49:1e:ad:e0:54:f8:48:ad:1d:e7:
         ce:03:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org